This is a well designed but technically simple. Widespreaded the last couple of days.
E-mail
The email is pretty convincing:
What could be noticed is the unusual URL for the bank site. But it is cleverly chosen to decieve the potential victim. In addition, the sender is spoofed to look like it is from the real bank site, and a discrepancy can be noticed - the sender is from 'unionplanters.com', and the link takes to 'unionplantersonlinebank.com'.
The site does not use any tech tricks - the phishers bet is on the convincing design and the URL similarity.
First, a login screen comes up:
The most notable phishing clue is the lack of a security certificate and a 'https' session. The legitimate site would have a secure login.
As usual with such scams, the second page asks for credit card information:
The site would not perform any checks on the data entered. As soon as a field is not empty, it will pass. A simple logout screen will follow the second page, after which the browser will be redirected
to a 'policies ' page on the legitimate site.
